Issues/464

This is branched from https://github.com/freedomofpress/securedrop/pull/463, and resolves #464.  This adds filters for the journalist interface, both the overview of sources and list of documents.  It also makes sure that any souces / submissions that are not visible will not be deleted/starred/unstarred.  Only visible items will be acted upon.  This preserves the graceful degradation of both `index` and `col`.
I agree -- `filesystem_id` seems like a more intuitive way to reference this concept.